Identify and mitigate security threats in system designs using STRIDE, DREAD, and PASTA.
npx skills add https://github.com/cosmix/claude-code-setup --skill threat-model
Please help me install this Agent Skill. Skill: threat-model Source: https://github.com/cosmix/claude-code-setup/tree/main/skills/threat-model Command: npx skills add https://github.com/cosmix/claude-code-setup --skill threat-model
Threat modeling provides structured methodologies (STRIDE, DREAD, PASTA) to identify, assess, and mitigate security risks early in the design phase.
Create a threat model for a new API with STRIDE categories and a risk rating table.
High-intent search queries and answers about installing and using this skill.
Threat modeling is a structured methodology for identifying and mitigating security risks early in design. Use it during new system design, architecture reviews, feature additions, third-party integrations, and compliance assessments to systematically uncover vulnerabilities before deployment.
STRIDE systematically categorizes threats across six dimensions: spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. Map each category against your system components and data flows to identify threat vectors comprehensively.
DREAD scoring quantifies risk by assessing damage potential, reproducibility, exploitability, affected users, and discoverability for each threat. This produces a numeric risk rating that prioritizes which threats demand mitigation first.
Yes. Threat modeling supports API threat analysis through data-flow diagrams, asset identification, trust-boundary mapping, and attack tree construction. This guides you through scoping threats, identifying vulnerabilities, and planning risk-based mitigations.
STRIDE categorizes threats by attack type, DREAD scores risk numerically, and PASTA uses process-driven risk analysis. Choose based on your workflow: STRIDE for threat enumeration, DREAD for prioritization, PASTA for comprehensive process-centric assessment.
Threat modeling is most effective when structured templates, clear data-flow guidance, and systematic categorization frameworks reduce guesswork. STRIDE, DREAD, and PASTA provide that structure, making threat analysis accessible to architects and engineers with security awareness.
jwm-axoniDefine system scope, assets, entry points, and STRIDE threats for a threat model document.
PriyanshKuniyalIdentifies security threats and matches them to relevant controls and mitigations using Python classes.
epieczkoGenerate STRIDE-based threat models with CVSS risk scoring and mitigation recommendations.
Fantasia1999Perform STRIDE threat modeling and vulnerability analysis for security reviews.
